<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div><span>OK I dug up the setting in the Wiki, re-tested and we get this error:</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal;"><span><br></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal;"><span><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px;"><b><span lang="EN" style="font-size: 8pt;">xmltooling::<wbr>ValidationException<u></u><u></u></span></b></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px;"><span lang="EN" style="font-size: 8pt;">The system encountered an error at Thu Feb 07
11:26:17 2013<u></u><u></u></span></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px;"><span lang="EN" style="font-size: 8pt;">To report this problem, please contact the site administrator at <a href="mailto:mflynn@lynda.com" target="_blank" style="color: rgb(17, 85, 204);">mflynn@lynda.com</a>.<u></u><u></u></span></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px;"><span lang="EN" style="font-size: 8pt;">Please include the following message in any email:<u></u><u></u></span></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px;"><span lang="EN" style="font-size: 8pt;">xmltooling::<wbr>ValidationException at (<a href="https://shib.lynda.com/Shibboleth.sso/SAML2/POST" target="_blank" style="color: rgb(17, 85,
204);">https://shib.lynda.com/<wbr>Shibboleth.sso/SAML2/POST</a>)<u></u><u></u></span></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px;"><span lang="EN" style="font-size: 8pt;">AudienceRestriction must have at least one Audience</span></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 8pt; background-color: transparent; font-style: normal;"><span lang="EN" style="font-size: 8pt;"><br></span></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 11px; background-color: transparent; font-style: normal;"><span lang="EN" style="font-size: 8pt;">Googling around with that, I assume the entityID for the request as the value for this should work, correct?</span></div></span></div><div><br></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div
style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> "Cantor, Scott" <cantor.2@osu.edu><br> <b><span style="font-weight: bold;">To:</span></b> Shib Users <users@shibboleth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Thursday, February 7, 2013 11:07 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> RE: IdP initiated SSO<br> </font> </div> <br>
> Are you saying that there is something in IIS that I can adjust to get<br>> something to show in the event logs for this error? I checked all the event<br>> logs as well as all of the shib logs and I got nothin'<br><br>I don't know if you're the one feeding the response into the browser to test it, but whoever is should either get some kind of technical error from the SP (using the sessionError template) or IIS is masking that and returning a vanilla 500. That's usual by default, it has a setting to hide detailed error information. I believe I found the name of the setting and put it in the IIS 7 install page in the wiki.<br><br>So yes, possibly it's hiding something useful.<br><br>-- Scott<br><br><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br> </div> </div> </div></body></html>